Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisoryFedoraauthorization bypassUbuntu 24.04: 2024-a1b2c3d4e5 Moderate: openvpn Security Flaw
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63:. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-58c59bfa4c 2024-03-23 00:20:56.396900 -------------------------------------------------------------------------------- Name : libell Product : Fedora 40 Version : 0.63 Release : 1.fc40 URL : Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63: Fix issue with handling ending boundary of the PEM. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 28 2024 Peter Robinson - 0.63-1 - Update to 0.63 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263042 - libell-0.63 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263042 [ 2 ] Bug #2263573 - iwd-2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263573 [ 3 ] Bug #2264597 - TRIAGE CVE-2023-52161 iwd: potential authorization bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264597 -------------------------------------------------------------------------------- This update can be installed with the "dnf"update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-58c59bfa4c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 23, 2024
Fedora
98
security advisoryRed HatauthenticationRed Hat: RHSA-2022:0034-01 Important: Container Security Update
A security update is now available for Red Hat Single Sign-On 7.5 container images for IBM P/Z. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: security update of rh-sso-7/sso75 container images for IBM P/Z Advisory ID: RHSA-2022:0034-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2022:0034 Issue date: 2022-01-05 CVE Names: CVE-2021-3712 CVE-2021-4133 CVE-2021-42574 ==================================================================== 1. Summary: A security update is now available for Red Hat Single Sign-On 7.5 container images for IBM P/Z. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat Single Sign-On 7.5 container images for IBM P/Z, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This is a security update Red Hat Single Sign-On 7.5, and includes one security fix. Security Fix: * keycloak: Incorrect authorization allows unpriviledged users to create other users (CVE-2021-4133) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: The RHEL-8 based Middleware Containers container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat ContainerCatalog (see References). Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally. 4. Bugs fixed (https://bugzilla.redhat.com/): 2033602 - CVE-2021-4133 Keycloak: Incorrect authorization allows unpriviledged users to create other users 5. References: https://access.redhat.com/security/cve/CVE-2021-3712 https://access.redhat.com/security/cve/CVE-2021-4133 https://access.redhat.com/security/cve/CVE-2021-42574 https://access.redhat.com/security/updates/classification#important 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYdX13tzjgjWX9erEAQiU7Q/+KTxabnZ2G7/tDEWcYKGufxuf32ssPdN5 pRaB7RgNh2y0EAg3RrcH8GqqG+v0bjEDVYVZ8yh4aJFWQQJc8NDBVxLUzXPPEZZY GUChwR1pJGXGdS7IJ4XTKqOEcAhMLWosKzk5Glj5xmG46ZAPSm/CJWR1qMjCcdc9 H7AgxsZRV+RYsI5N1roXcYvjbnZEqictX6+nncCsrGFBhav2R5iey7WcamuEceze 24tggcbYNhwfF3OYBRMPRxyPk3vffTQ5x7sQ7KfVIvh15Ki3O+JOuBG3jtw8n83e V89KY3yJKM2huxzpt72MF+PAEkqTKmuPDchuBVIgzNAg+c/t6k5LOXhTjHGR3jgp UldqKmVmB+CV3Hrf97DMw+xF/V4upB7WRJjqoPDEP1DN2CRU0DZFnbuVtDaA00jP 5AyKmjNxF4SKyjPkK0DSeamQ///g8dYJO7XKfHKeQI7TMMDHTQkbnbLL1ltizVMa BPo7a7ft1jX8WPQ19C8bl20z3bcNarxjJUyfgd4NiPl0mG08bGaWNdn3nj7I5Oe3 9xuUgR+rQr2EwAZ4itRWnNcpQl8gECpjDrkKGB3/QWRjjRKSVHPjRZJnrEy2oSXx F9wsJpCmFcL583KuI47h5qQJiu2pdvuOLv8OTz5DBRn9E3E9NQosulpbj5mdzsOv EkrjGPohlcE=IAwR -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 05, 2022
•Important
Red Hat
100
security advisoryhttp headersSUSE Enterprise StorageSUSE: 2018:2299-1 Important: Ceph Security Update and Fixes
An update that solves four vulnerabilities and has two fixes is now available. . SUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2299-1 Rating: important References: #1072512 #1080112 #1081379 #1086340 #1096748 #1099162 Cross-References: CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-7262 Affected Products: SUSE Enterprise Storage 4 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-10861: Fix ceph-mon authorization on OSD pool ops (bsc#1099162). - CVE-2018-1128: Fix cephx signature check bypass (bsc#1096748). - CVE-2018-1129: Fix cephx protocol vulnerability to replay attack (bsc#1096748). - CVE-2018-7262: Fix malformed http headers that can crash rgw (bsc#1081379). Bug fixes: - bsc#1072512: multipart uploads are broken if the bucket has been resharded - bsc#1080112: rgw: user stats increased after bucket reshard - bsc#1086340: SES5: XFS metadata corruption on rbd-nbd mapped image with journaling feature enabled Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Enterprise Storage 4: zypper in -t patch SUSE-Storage-4-2018-1537=1 Package List: - SUSE Enterprise Storage 4 (aarch64 x86_64): ceph-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-base-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-base-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-common-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-common-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-debugsource-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-fuse-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-fuse-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-mds-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-mds-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-mon-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-mon-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-osd-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-osd-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-radosgw-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-radosgw-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-test-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-test-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 ceph-test-debugsource-10.2.11+git.1531487710.3a12911a2e-12.14.2 libcephfs1-10.2.11+git.1531487710.3a12911a2e-12.14.2 libcephfs1-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 librados2-10.2.11+git.1531487710.3a12911a2e-12.14.2 librados2-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 libradosstriper1-10.2.11+git.1531487710.3a12911a2e-12.14.2 libradosstriper1-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 librbd1-10.2.11+git.1531487710.3a12911a2e-12.14.2 librbd1-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 librgw2-10.2.11+git.1531487710.3a12911a2e-12.14.2 librgw2-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-ceph-compat-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-cephfs-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-cephfs-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-rados-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-rados-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-rbd-10.2.11+git.1531487710.3a12911a2e-12.14.2 python-rbd-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 rbd-fuse-10.2.11+git.1531487710.3a12911a2e-12.14.2 rbd-fuse-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 rbd-mirror-10.2.11+git.1531487710.3a12911a2e-12.14.2 rbd-mirror-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 rbd-nbd-10.2.11+git.1531487710.3a12911a2e-12.14.2 rbd-nbd-debuginfo-10.2.11+git.1531487710.3a12911a2e-12.14.2 References: https://www.suse.com/security/cve/CVE-2018-10861.html https://www.suse.com/security/cve/CVE-2018-1128.html https://www.suse.com/security/cve/CVE-2018-1129.html https://www.suse.com/security/cve/CVE-2018-7262.html https://bugzilla.suse.com/1072512 https://bugzilla.suse.com/1080112 https://bugzilla.suse.com/1081379 https://bugzilla.suse.com/1086340 https://bugzilla.suse.com/1096748 https://bugzilla.suse.com/1099162 . A new update is now released for Ceph, focusing on crucial security vulnerabilities and bug resolutions to improve overall storage performance.. Important Update,SUSE Security,Critical Ceph Issues,Ceph Fixes ,SUSE Enterprise Storage. . Severity: Important. LinuxSecurity.com Team
Aug 10, 2018
•Important
SuSE
89
security advisoryFedoracommand injectionFedora 22: FEDORA-2015-14983 Critical: pcs Command Injection Fix
pcs-0.9.139-7.fc22 - Fix for CVE-2015-5189 incorrect authorization - Fix for CVE-2015-5190 command injection. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-14983 2015-09-18 18:09:49.148507 -------------------------------------------------------------------------------- Name : pcs Product : Fedora 22 Version : 0.9.139 Release : 7.fc22 URL : https://github.com/ClusterLabs/pcs Summary : Pacemaker Configuration System Description : pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and created pacemaker based clusters. -------------------------------------------------------------------------------- Update Information: pcs-0.9.139-7.fc22 - Fix for CVE-2015-5189 incorrect authorization - Fix for CVE-2015-5190 command injection -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pcs' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Sep 18, 2015
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!